n/a Clustered Data ONTAP

Name: n/a Clustered Data ONTAP
Brand: n/a

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical4high7medium5low

updated 2026-10-28

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-5508US	high7.5	1.32% (71st)	—	no fix	2019-10-25	≤ 9.2 and higher
CVE-2020-8579US	high7.5	1.29% (70th)	—	no fix	2020-10-27	≤ 9.7 through 9.7P7
CVE-2021-26989US	medium6.5	1.27% (70th)	—	no fix	2021-03-04	≤ Prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8
CVE-2021-27005US	high7.5	1.27% (70th)	—	no fix	2021-11-01	≤ Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3
CVE-2020-8581US	medium6.5	0.90% (59th)	—	no fix	2021-01-19	≤ Versions prior to 9.3P20 and 9.5
CVE-2022-23241US	high8.1	0.88% (59th)	—	no fix	2022-10-19	≤ 9.11.1 through 9.11.1P2
CVE-2021-26994US	medium6.5	0.83% (57th)	—	no fix	2021-06-04	≤ Versions prior to 9.7P13 and 9.8P3
CVE-2019-5506US	medium5.9	0.82% (57th)	—	no fix	2019-10-09	≤ 9.0 and higher
CVE-2020-8576US	medium5.4	0.73% (54th)	—	no fix	2020-09-02	≤ Versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7
CVE-2021-27003US	medium4.7	0.62% (49th)	—	no fix	2021-10-12	≤ Versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1
CVE-2020-8589US	low3.5	0.55% (46th)	—	no fix	2021-02-03	≤ Versions prior to 9.3P20 and 9.5P15
CVE-2020-8588US	low3.5	0.55% (46th)	—	no fix	2021-02-03	≤ Versions prior to 9.3P20 and 9.5P15
CVE-2021-26988US	low3.5OT elevated	0.43% (37th)	—	no fix	2021-03-04	≤ Prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8
CVE-2020-8590US	low3.3	0.34% (28th)	—	no fix	2021-02-08	≤ Versions prior to 9.1P18 and 9.3P12
CVE-2020-8578US	low3.3	0.34% (28th)	—	no fix	2021-02-08	≤ Versions prior to 9.3P20
CVE-2021-27001US	medium5.5	0.26% (17th)	—	no fix	2021-10-19	≤ 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2

weaknesses (7)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-400Uncontrolled Resource Consumption5 CVEs
CWE-287Improper Authentication2 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-295Improper Certificate Validation1 CVEs
CWE-862Missing Authorization1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)16 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan